This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json) Hash identifier: gw9/5DciHuv+C2O3nKB3cJAz4y/8ow0p0ddhkvnXcGA= Subject key identifier: 16:8E:1F:72:2E:D3:00:FB:23:5D:4E:64:27:3F:E1:F0:F9:4A:04:88 Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Certificate serial: 019B3B6B9ACE4AFFBAF7DABEABFB79027D33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft Manifest number: 129E Signing time: Sat 20 Dec 2025 11:01:06 +0000 Manifest this update: Sat 20 Dec 2025 11:01:06 +0000 Manifest next update: Sun 21 Dec 2025 11:01:06 +0000 Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: fowmrfXdV5yQ7nXtG6OWX9DubXXcW1fKQkf3opojYUk=) 2: Zbhs7ceORmznv_4uvlnuPbBDx_c.roa (hash: MJdiewY9l3NAhxc3ZEXNNrBUcBcVMuNcqhqsZh7jqig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:9a:ce:4a:ff:ba:f7:da:be:ab:fb:79:02:7d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Validity Not Before: Dec 20 11:01:06 2025 GMT Not After : Dec 21 11:01:06 2025 GMT Subject: CN=168e1f722ed300fb235d4e64273fe1f0f94a0488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:46:1d:1a:11:e3:40:dd:fc:c4:5b:e2:3c: d4:71:16:16:51:08:63:7a:67:90:f6:2f:14:13:da: 34:e3:75:7d:f2:93:69:4a:f7:25:8f:fa:d9:2f:a0: 71:db:55:2d:c5:86:b5:40:c3:92:28:fa:15:0f:c2: a5:be:3d:59:c0:15:1b:c0:0e:08:4b:f0:7d:a1:58: 7f:cc:ee:e6:98:d0:c5:36:af:f3:ac:8f:03:26:21: b5:ec:c8:77:0b:ad:53:62:03:e1:be:90:73:b2:37: 85:bf:b7:58:80:f9:54:18:3e:05:db:0e:50:18:f1: 70:87:5d:da:43:77:74:75:07:ef:eb:42:33:8c:66: f9:06:c4:3a:e4:ec:51:3f:38:a7:5a:ac:bc:69:8a: d3:3a:f2:dd:88:39:23:70:3f:09:5c:db:76:74:6b: a1:17:36:89:b2:7b:69:15:d8:94:a8:3e:5f:67:d8: 19:e3:d8:28:38:2c:82:a4:bf:18:1e:5d:11:b3:a6: 9a:06:bd:5c:12:4a:a3:a2:51:19:d8:09:72:66:0b: f0:d2:45:be:a1:a5:3f:d5:80:a8:53:db:bb:eb:ce: cc:27:ac:e3:df:ca:38:32:12:f9:a6:1d:f5:4d:32: a3:f9:9d:23:4b:1f:83:1f:a7:02:19:7e:52:ac:19: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8E:1F:72:2E:D3:00:FB:23:5D:4E:64:27:3F:E1:F0:F9:4A:04:88 X509v3 Authority Key Identifier: keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7c:95:e6:1a:06:e0:fc:32:ff:d2:d2:3a:9f:ce:c7:64:56: f0:55:b1:e0:9d:71:7e:1e:e4:8d:f1:e1:02:80:9f:e7:26:a4: f9:14:ab:59:ea:db:e6:d8:46:3f:1e:c5:9b:ec:0c:0a:27:44: a3:43:29:f5:74:b9:6b:ac:04:2e:1f:12:30:54:02:34:ae:e6: 05:f2:09:ef:3c:fa:5e:f5:fb:9e:e5:b3:f2:74:b5:6c:ed:ea: 5d:7f:a9:a7:14:ce:33:70:14:f5:6a:df:f4:cf:27:f1:64:d0: 64:ad:84:bd:d3:35:90:bc:31:cd:7f:a9:7f:f9:4a:da:16:d9: 54:a7:fb:a7:df:66:1b:53:5d:5d:b5:1a:c9:f9:8c:77:dd:06: dd:f3:70:87:64:44:7e:f5:3a:7f:c3:5c:05:8d:f6:01:9e:3a: f6:8a:66:19:50:1c:df:50:93:f0:d1:47:3e:48:c7:f4:f4:16: 44:7a:64:14:4a:3c:8e:b8:e8:7d:40:c6:a5:dc:17:e9:9b:cf: aa:81:2a:b7:4c:a6:57:1d:b6:55:cf:fb:34:fc:07:c7:02:b5: 11:21:cc:ee:22:0b:0d:18:45:0d:b1:ea:aa:8d:07:af:7d:bf: 0e:5e:b8:8a:0a:01:ac:56:e2:7c:12:54:ea:36:25:ba:7b:4a: 39:01:87:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5rOSv+699q+q/t5An0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx ODgzNWYwHhcNMjUxMjIwMTEwMTA2WhcNMjUxMjIxMTEwMTA2WjAzMTEwLwYDVQQD EygxNjhlMWY3MjJlZDMwMGZiMjM1ZDRlNjQyNzNmZTFmMGY5NGEwNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZdGHRoR40Dd/MRb4jzUcRYWUQhj emeQ9i8UE9o043V98pNpSvclj/rZL6Bx21UtxYa1QMOSKPoVD8Klvj1ZwBUbwA4I S/B9oVh/zO7mmNDFNq/zrI8DJiG17Mh3C61TYgPhvpBzsjeFv7dYgPlUGD4F2w5Q GPFwh13aQ3d0dQfv60IzjGb5BsQ65OxRPzinWqy8aYrTOvLdiDkjcD8JXNt2dGuh FzaJsntpFdiUqD5fZ9gZ49goOCyCpL8YHl0Rs6aaBr1cEkqjolEZ2AlyZgvw0kW+ oaU/1YCoU9u7687MJ6zj38o4MhL5ph31TTKj+Z0jSx+DH6cCGX5SrBn79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaOH3Iu0wD7I11OZCc/4fD5SgSIMB8GA1UdIwQY MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt OGUwYjNmNTg5N2I5LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5 LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHyV5hoG 4Pwy/9LSOp/Ox2RW8FWx4J1xfh7kjfHhAoCf5yak+RSrWerb5thGPx7Fm+wMCidE o0Mp9XS5a6wELh8SMFQCNK7mBfIJ7zz6XvX7nuWz8nS1bO3qXX+ppxTOM3AU9Wrf 9M8n8WTQZK2EvdM1kLwxzX+pf/lK2hbZVKf7p99mG1NdXbUayfmMd90G3fNwh2RE fvU6f8NcBY32AZ469opmGVAc31CT8NFHPkjH9PQWRHpkFEo8jrjofUDGpdwX6ZvP qoEqt0ymVx22Vc/7NPwHxwK1ESHM7iILDRhFDbHqqo0Hr32/Dl64igoBrFbifBJU 6jYluntKOQGHGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:31 2025 by rpki-client